$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: 85dzZMtehn1L/rCiJAhhGR7B84C5u9M7wujuP6206Q4= Subject key identifier: 21:DB:F5:9C:4D:91:F3:1C:D3:6C:E5:8E:DE:96:8A:B4:73:98:BB:30 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 1721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 1710 Signing time: Mon 06 May 2024 17:10:01 +0000 Manifest this update: Mon 06 May 2024 17:10:00 +0000 Manifest next update: Mon 13 May 2024 17:10:00 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: +n2ctpjr1vhcSYv44C0QW68LznTZGWrEZOzz/y9u6go=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: WcxbXK7pdjHqiaOm+c53LrwbHNpvehmBziJhBJ+L4+A=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ybBCNAe9ww1gC6h0hxh0XLQ0JxvVGyjFwMWuAiX5tEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5921 (0x1721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: May 6 17:10:00 2024 GMT Not After : May 13 17:10:00 2024 GMT Subject: CN=66390ee8-a867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:eb:1e:b2:e9:d1:ea:2d:fc:9a:de:6f:aa: 8f:7f:d4:87:d4:28:30:21:42:56:2e:2e:66:d9:2f: 62:8b:b0:f9:e4:67:57:35:63:b3:46:ea:1a:b8:79: eb:83:7a:44:ed:ad:f4:6e:b9:aa:47:8e:b1:3d:6b: d5:99:0b:90:2f:0b:93:be:e0:b6:75:0a:b5:68:d9: c0:90:e2:b7:3f:da:2a:3c:bd:d3:00:2c:1c:5a:b6: ee:36:f3:38:84:26:80:4f:5a:67:8a:97:1f:72:66: d1:dd:9c:02:eb:80:fa:02:43:cc:22:a8:fd:8b:49: e9:63:c9:e7:05:94:3e:81:c9:10:f9:58:99:29:f3: e7:29:13:19:d1:44:e6:da:2a:4d:6c:5d:fd:c7:15: f9:30:8d:b5:28:6d:41:75:55:49:a2:1a:5c:c1:8b: 04:2e:f7:e0:d8:1a:8d:c4:ca:27:07:f9:56:d9:30: 5d:67:81:3b:e7:23:be:db:bd:3e:a9:15:5f:d7:b6: fa:a4:93:87:7a:ce:da:4a:8b:da:a7:c1:3d:9b:d9: be:be:4b:d9:83:90:6a:23:d5:f7:cd:18:15:dd:2a: 49:71:1f:89:0f:03:38:5c:b5:48:e0:7a:aa:dd:43: cf:db:3e:6d:89:80:19:c2:8a:01:7e:b3:5a:25:82: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DB:F5:9C:4D:91:F3:1C:D3:6C:E5:8E:DE:96:8A:B4:73:98:BB:30 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f6:c5:a8:5e:4d:ea:74:da:2d:ee:12:32:c8:41:38:a4:7d: 36:69:31:3d:46:60:cd:2f:b7:5c:23:1a:90:77:2e:c4:1c:a8: 75:63:ad:03:3b:0b:f2:f7:fa:83:a3:58:1b:90:e5:89:09:5a: 40:54:e5:40:63:f1:a7:56:8f:fe:5b:ae:f3:bf:e9:6c:ed:b5: f6:76:85:61:e9:54:68:4a:1a:fc:91:91:d5:ed:83:f2:4b:95: 94:2d:84:35:5f:d4:a6:fa:01:59:f7:59:4a:cf:e7:57:fb:94: d4:90:b8:af:90:3d:02:cd:50:0a:a7:f9:0e:b9:18:f5:05:cb: c9:59:62:2a:ad:cc:c7:c2:78:11:18:65:39:a7:90:4a:97:08: 3b:cf:7f:b9:be:88:d4:ce:f3:d8:36:68:a2:56:39:93:28:72: 43:0f:25:39:07:64:f6:ff:34:34:36:a2:72:90:55:47:61:e3: 28:c0:03:ef:da:60:09:58:fa:56:99:51:5f:49:9c:b0:61:f5: 0a:32:a0:86:62:9c:a2:83:2c:08:3b:5d:5c:ec:16:94:79:bd: b8:a6:08:dd:bf:e0:ad:91:6e:bf:2a:84:42:b0:69:88:1a:86: 81:3f:f9:37:25:8d:16:10:ee:e4:19:34:38:82:0e:cc:bf:8b: 55:b6:20:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjQwNTA2MTcxMDAwWhcNMjQwNTEzMTcxMDAwWjAYMRYwFAYD VQQDEw02NjM5MGVlOC1hODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwirrHrLp0eot/Jreb6qPf9SH1CgwIUJWLi5m2S9ii7D55GdXNWOzRuoauHnr g3pE7a30brmqR46xPWvVmQuQLwuTvuC2dQq1aNnAkOK3P9oqPL3TACwcWrbuNvM4 hCaAT1pnipcfcmbR3ZwC64D6AkPMIqj9i0npY8nnBZQ+gckQ+ViZKfPnKRMZ0UTm 2ipNbF39xxX5MI21KG1BdVVJohpcwYsELvfg2BqNxMonB/lW2TBdZ4E75yO+270+ qRVf17b6pJOHes7aSovap8E9m9m+vkvZg5BqI9X3zRgV3SpJcR+JDwM4XLVI4Hqq 3UPP2z5tiYAZwooBfrNaJYJJpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHb9ZxN kfMc02zljt6WirRzmLswMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN9sWoXk3qdNot7hIyyEE4pH02aTE9RmDNL7dcIxqQdy7EHKh1Y60D Owvy9/qDo1gbkOWJCVpAVOVAY/GnVo/+W67zv+ls7bX2doVh6VRoShr8kZHV7YPy S5WULYQ1X9Sm+gFZ91lKz+dX+5TUkLivkD0CzVAKp/kOuRj1BcvJWWIqrczHwngR GGU5p5BKlwg7z3+5vojUzvPYNmiiVjmTKHJDDyU5B2T2/zQ0NqJykFVHYeMowAPv 2mAJWPpWmVFfSZywYfUKMqCGYpyigywIO11c7BaUeb24pgjdv+CtkW6/KoRCsGmI GoaBP/k3JY0WEO7kGTQ4gg7Mv4tVtiCk -----END CERTIFICATE-----Generated at Mon May 6 20:19:20 2024 by rpki-client on console-fra.rpki-client.org